I have an oinkmaster doc out there and if I can ever shake the flu and
respiratory infection I have I will finish my barnyard documentation.
Basically for how they work together is you tell snort how to log (flat
file, unified file, or DB) (then you have a program like barnyard (if you
use unified) spit it into the DB) or get the data into the DB directly from
snort and read it with BASE or Sguil. Or run something like snortsnarf
against the flat file.
Hope that helps, and makes sense. The fever is burning and my brain is
fried so no telling if this e-mail will even be anything close to readable.
Time to go take more pills and chug some Nyquil to top it of. Happy
snorting, and happy new years to all.
Patrick S. Harper | CISSP RHCT MCSE
www.internetsecurityguru.com
Technology is not a panacea. Commonsense, knowledge, and diligence are the
costs of a secure environment.
-----Original Message-----
From: Shane Presley [mailto:shane.presley@gmail.com]
Sent: Wednesday, January 11, 2006 12:10 PM
To: patrick@internetsecurityguru.com
Cc: snort-users@lists.sourceforge.net
Subject: Re: [Snort-users] Installing on RedHat
Thanks, that worked perfectly for me.
One documentation suggestion for the group (or maybe this exists?).
Some kind of a high level overview of the components and choices. For
example, how all the pieces can work together, and your options
(Snort, back end db options, Base, OinkMaster, etc).
But I appreciate all the excellent Setup Guides that are out there!
Shane
On 1/10/06, patrick@internetsecurityguru.com
<patrick@internetsecurityguru.com> wrote:
Try using the CentOS/RHEL guide on the snort.org website. It will walk
you
through it step by step
Patrick S. Harper | CISSP RHCT MCSE
www.internetsecurityguru.com
Technology is not a panacea. Commonsense, knowledge, and diligence are
the
costs of a secure environment.
-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems? Stop! Download the new AJAX search engine that makes
searching your log files as easy as surfing the web. DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
